Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa
File:                     myM_0rlBYmLZEdH2vDPyd5jD26Y.roa (raw, json)
Hash identifier:          9Y+T42ieMCNODWNdOLkhQzkvd4Q7LWgv6npTlyWeRfQ=
Subject key identifier:   9B:23:3F:D2:B9:41:62:62:D9:11:D1:F6:BC:33:F2:77:98:C3:DB:A6
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       05DFAE4D
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa
Signing time:             Sat 01 Jan 2022 10:54:41 +0000
ROA not before:           Sat 01 Jan 2022 10:54:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207404
IP address blocks:        194.127.208.0/22 maxlen: 24
                          2001:678:c48::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98545229 (0x5dfae4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jan  1 10:54:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b233fd2b9416262d911d1f6bc33f27798c3dba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:6f:1f:7b:78:9d:33:6b:09:52:5e:cd:ce:
                    bf:f2:4c:3d:d2:d1:c6:5f:44:5d:62:6e:e0:02:fe:
                    81:3d:f3:73:5d:86:77:65:4b:45:cf:ae:50:86:95:
                    13:59:8e:f2:b3:01:7a:ed:88:15:be:d6:19:43:e2:
                    7a:52:a8:db:90:81:ba:e2:81:75:0c:ce:26:30:38:
                    19:a2:0d:96:96:14:3f:a3:12:fc:2c:db:26:2d:21:
                    fa:9d:92:62:4a:38:a3:8f:fb:9a:31:89:d1:a0:bb:
                    16:33:9a:5c:3a:d6:ff:ee:bd:2f:9b:ab:8d:68:53:
                    9c:1a:9b:54:1d:72:55:57:bb:5d:30:e8:e2:28:62:
                    9e:0a:ac:74:63:ae:ed:2b:a3:ed:59:9e:d5:31:7a:
                    25:ba:56:7e:21:33:9f:a4:34:e1:39:e9:bd:3c:75:
                    ae:c6:2e:e5:f7:2f:3f:3b:ed:03:eb:e9:52:c2:9c:
                    4a:34:89:79:31:16:d5:40:5d:6d:76:df:78:46:a9:
                    86:ce:8a:81:b8:3c:ea:a9:41:a8:26:c6:dd:52:4e:
                    51:19:8f:7a:d4:23:71:52:ef:69:30:98:21:d2:6e:
                    21:09:d9:af:ec:27:d4:35:5d:dd:f7:71:c9:23:c5:
                    f7:5d:12:16:88:91:78:85:1b:5b:7d:3d:b4:fb:19:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:23:3F:D2:B9:41:62:62:D9:11:D1:F6:BC:33:F2:77:98:C3:DB:A6
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/myM_0rlBYmLZEdH2vDPyd5jD26Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.208.0/22
                IPv6:
                  2001:678:c48::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:44:f2:a2:49:31:db:3e:db:13:b2:54:4b:2b:e2:f5:73:62:
         e8:1f:c5:16:2d:87:6c:45:df:05:b4:b1:c4:e9:96:c3:98:d0:
         35:df:f6:a6:2b:6e:f3:b0:b6:87:e2:be:ab:49:2b:0d:c0:39:
         32:45:6b:cf:d9:9c:40:7d:23:ea:80:0f:75:95:33:df:48:7e:
         6e:dc:8f:63:57:9c:4e:0c:c0:c1:57:90:55:26:37:38:6f:bd:
         ec:87:a5:1d:0d:b3:9b:3c:37:cf:7c:47:99:52:39:03:df:b3:
         a3:2b:9a:1f:24:1b:04:de:4b:80:3c:6e:09:1b:ac:93:9f:3e:
         7f:cc:16:67:1c:6e:73:50:6b:37:9c:41:d2:f6:db:46:0d:12:
         4c:45:cb:b6:3b:ed:f4:01:d8:3c:2e:c1:7e:28:53:b3:83:d0:
         7d:cf:01:01:f6:4d:a3:7b:94:5a:71:32:2b:fc:2d:b7:81:da:
         e2:e3:c7:5c:93:60:84:19:93:c4:17:4c:d9:52:2d:98:a3:34:
         d8:5c:c3:2b:d8:ab:93:50:73:6a:8d:80:c1:7e:ba:63:0f:88:
         a8:82:98:a5:9c:ed:4c:6b:ee:1b:3e:6a:88:5d:1f:65:76:95:
         f4:fb:dc:6e:33:1f:c0:35:c0:49:af:08:64:ab:ab:3d:8f:ef:
         c6:d1:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----